Behavioral task
behavioral1
Sample
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics
-
Size
2.0MB
-
MD5
103e76fde9cae0ddd9c130f04ddc91e0
-
SHA1
8d912d99df0e97be05242aaa69002903b9206ee8
-
SHA256
9dfd129af3eb9d1d2fd7d57369053c11c64ed36c5888e6bb3026b3ad978a89a8
-
SHA512
8613c1ea3b97dba1f46d69af30c4cba4f89f86c178d3d4aff26c671b3c2d14ae1767064ae892daefdb7cd54ab44d09d013b65456062de0fff81aca3db3bda1b1
-
SSDEEP
49152:mAph0Q1M8h3GztIvs5hWy3zqy1OCiQFcJFvHZSM8IrijcX:muLNQziE5hWEz3OCiQFoHZ+IGjcX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics
Files
-
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE